mirror of
https://github.com/unraid/webgui.git
synced 2026-01-14 13:39:58 -06:00
Security update
This commit is contained in:
@@ -47,8 +47,8 @@ case 'get':
|
||||
echo shell_exec("$notify get");
|
||||
break;
|
||||
case 'hide':
|
||||
$file = realpath($_POST['file']??'');
|
||||
if (file_exists($file) && strpos($file,'/tmp/')===0 && pathinfo($file)['extension']=='notify') chmod($file,0000);
|
||||
$file = $_POST['file']??'';
|
||||
if (file_exists($file) && $file==realpath($file) && pathinfo($file)['extension']=='notify') chmod($file,0000);
|
||||
break;
|
||||
case 'archive':
|
||||
$file = $_POST['file']??'';
|
||||
|
||||
Reference in New Issue
Block a user